THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64523 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshake_nl_accept_doit() needs the file pointer backing req->hr_sk->sk_socket to survive the window between handshake_req_next() and the subsequent FD

[NVD] CVE-2026-64523 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshake_nl_accept_doit() needs the file pointer backing req->hr_sk->sk_socket to survive the window between handshake_req_next() and the subsequent FD

mednvdPublished 2026-07-25

CVE-2026-64523 CVSS: 9.8 CRITICAL Published: 2026-07-25T10:17:38.597

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Take a long-lived file reference at submit

handshake_nl_accept_doit() needs the file pointer backing req->hr_sk->sk_socket to survive the window between handshake_req_next() and the subsequent FD_PREPARE() and get_file(). The submit-side sock_ho

Indicators of compromise

CVE-2026-64523cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64523